Categories
Liability of the management Technology- & IT-Law

Cybersecurity in Germany: Implementation of the NIS2 Directive in Germany

Implementation of the NIS2 Directive in Germany: There are now draft laws on the implementation of the NIS2 Directive in Germany, and a clear line can be seen. In Germany, the NIS2 Directive is implemented by the “Act on the Implementation of the NIS-2 Directive and on the Regulation of Essential Principles of Information Security Management in the Federal Administration”. It is also known as the “NIS-2 Implementation and Cybersecurity Strengthening Act” or “NIS2UmsuCG” for short.

At the heart of it all is the German “BSI Act”: this law was originally created to regulate the competencies and measures of the Federal Office for Information Security (BSI). However, this law is increasingly being transformed into a set of cyber security regulations. This was already foreseeable with the German IT Security Act and has been enhanced with the IT Security Act 2.0. IT security in Germany – and Europe – is thus being raised to a completely new level and the economy in particular will have to dress warmly.

Note on the current status of the legislative process: The NIS2 Directive must actually be implemented by mid-October. However, draft bills have only been available since May 2024, which already raises doubts as to whether this will happen in time. With this in mind, a paragraph has been added on what delayed implementation means. The article has been updated to the status of the second draft bill (processing status: 24.06.2024).

Categories
Criminal Defense Liability of the management

Breach of a duty to look after assets as a board member of a stock corporation

The German Federal Court of Justice (3 StR 329/21) was able to comment on the breach of a duty to look after assets as a board member of a public limited company. The BGH emphasized that, from a legal point of view, it must be assumed that the management board of a stock corporation must be granted a wide scope of action when managing the business of a company, without which entrepreneurial activity is absolutely inconceivable.

Categories
Technology- & IT-Law

Gaming law – Cheats, bots & Co.: Legal issues surrounding online computer games in Germany

Gaming behavior with regard to computer games on the computer has changed considerably in recent years: Where floppy disks and CDs used to be the norm, sometimes in combination with obscure-looking copy protection measures (I fondly remember the Mix’n’Mojo hub at Monkey Island, which, incidentally, is also available online today), today not only downloads prevail, but also completely new gaming cultures, some of which have shifted entirely to the online realm.

Massively Multiplayer Online Role-Playing Games (MMORPGs) such as World of Warcraft have heralded a real cultural change in this respect – and also completely new legal issues: whereas people used to be most concerned about how best to copy games, today other desires prevail. At a time when accounts cost money and virtual goods have a real market value, cheating in games is viewed very differently. This is also reflected in recent court decisions. Lawyer Jens Ferner, who works in the field of software law, including legal issues relating to online games, provides an overview.

Categories
Technology- & IT-Law

Law on the development of computer games in germany

Computer games and the law in Germany: The world of computer games has developed rapidly in recent decades and is now a major industry that delights millions of people worldwide. However, behind the colorful graphics and exciting stories lies a complex legal landscape that developers, publishers and other parties involved must take into account. The law governing the development of computer games encompasses numerous areas of law, from copyright and media law to data protection and the protection of minors.

Categories
Cybercrime Cybersecurity Liability of the management

Strategies for ransomware negotiation

Is there a strategy for dealing with ransomware? Ransomware is a type of malware that blocks access to the victim’s system or data and demands a ransom to unlock or release it. Negotiations with cybercriminals over such attacks can be complex and risky.

Ransomware attacks are one of the biggest threats to companies worldwide: dealing with such crises correctly, especially negotiating with the attackers, can be crucial to minimizing the damage and regaining control. I am an atypical source of information here because I usually work as a lawyer for the attackers and therefore have completely different insights.

I would like to loosely explore the question of whether there can be fundamental strategic considerations on this topic. And indeed, based on current studies and practical experience, important insights can be gained and mistakes that can occur during negotiations can be avoided.

Categories
Technology- & IT-Law

Software development contract: Contract for the development of software in Germany

A software development contract regulates the relationships and obligations between a client who wishes to have software developed and a software developer or a software development company.

The core of such a contract is to precisely define the specifications and requirements of the software to be developed in order to ensure that the end product meets the client’s expectations. In practice, however, it is precisely this part that is shied away from, firstly because it does not seem practicable, as requirements are always subject to change anyway, and secondly because people shy away from the work involved.

Categories
Cybersecurity Technology- & IT-Law

Contract design for IT security services in Germany

IT security services: IT security is – quite rightly – the dominant topic today and continues to play an increasingly important role in everyday life. The question of how to deal with it when companies engage external service providers to secure their systems is still somewhat out of focus.

This article provides a clear overview of what should be considered when drafting a contract for an IT security service in Germany in order to protect both parties – provider and customer.

Categories
Criminal Defense

BFH ruling on international account information

In a recent ruling dated January 23, 2024 (IX R 36/21), the German Federal Fiscal Court (BFH) ruled on the constitutionality of the automatic exchange of financial account information and its compatibility with fundamental rights. This issue has far-reaching implications for taxpayers with accounts abroad.

Categories
Criminal Defense

Cannabis Act (CanG) – Legalization of cannabis in Germany

Cannabis is being legalized in Germany – at least partially: On March 27, 2024, the new German Cannabis Act was published in the Federal Law Gazette and will come into force on April 1, 2024. This marks the end of the era in which cannabis was regulated by the BtMG and in future the Consumer Cannabis Act (KCanG) will be the main law to be taken into account.

In Germany, the following approach is taken: possession of cannabis is legal up to a certain amount and only becomes a criminal offense if it is noticeably exceeded. You are allowed to possess more cannabis at home than you have in your pocket on the street.

The intention is to create a system in which non-commercial cannabis social clubs (“cultivation associations”) serve as a source of supply, although it is quite costly to set up and operate one. The safety requirements, as well as the official requirements, are very high! Probably in order to avoid criminal liability, the legislator has also made the purchase of cannabis unpunishable as long as one does not buy “too much”. Overall, this has been the case in Germany since April 1, 2024:

  • You may possess up to 25 grams of cannabis when you are out and about; at home you may have 50 grams of cannabis;
  • You can buy up to 25 grams of cannabis per day, but no more than 50 grams per month;
  • Cuttings and seeds are excluded from the definition of cannabis, so that there is considerable freedom here, but: You may possess a maximum of 3 living cannabis plants and only if you do not have cannabis at home at the same time;
  • Foreigners and tourists also benefit from these regulations! However, you should stick to the smallest permitted quantity and never buy or carry more than 25 grams. Not even in your hotel room.

Cannabis 2024 and cultivation associations (“cannabis social clubs”)

Numerous questions arise around cannabidiol and legal hemp products, which lie at the intersection of BTM criminal law and competition law. BtMG lawyer Jens Ferner previously worked for many years in unfair competition law, especially cosmetics law and food law.

Today, he advises on the distribution of products for growers’ associations and cannabis social clubs as well as the activities of companies in matters relating to the legal distribution and promotion of cannabis, cannabidiol and legal hemp products. You can find our German-language articles on the Cannabis Act 2024 here.

What is punishable under the KCanG?

A custodial sentence of up to three years or a fine shall be imposed in accordance with Section 34 on anyone who

  1. contrary to § 2 paragraph 1 number 1
    • a) possesses more than 30 grams of cannabis, in the case of flowers, leaves close to the flower or other plant material of the cannabis plant in relation to the weight after drying, in a place that is not his domicile or habitual residence,
    • possesses a total of more than 60 grams of cannabis, in the case of flowers, leaves close to the flower or other plant material of the cannabis plant, based on the weight after drying, or
    • possesses more than three living cannabis plants,
  2. contrary to § 2 paragraph 1 number 2
    • a) cultivates more than three cannabis plants at the same time or
    • b) does not cultivate cannabis plants for personal consumption,
  3. produces cannabis contrary to § 2 paragraph 1 number 3,
  4. trades in cannabis contrary to § 2 paragraph 1 number 4,
  5. imports or exports cannabis contrary to § 2 paragraph 1 number 5,
  6. carries out cannabis contrary to § 2 paragraph 1 number 6,
  7. distributes or passes on cannabis contrary to § 2 paragraph 1 number 7,
  8. supplies cannabis for direct consumption contrary to § 2 paragraph 1 number 8,
  9. administers cannabis contrary to § 2 paragraph 1 number 9,
  10. otherwise places cannabis on the market contrary to § 2 paragraph 1 number 10,
  11. obtains cannabis contrary to § 2 paragraph 1 number 11,
  12. contrary to § 2 paragraph 1 number 12
    • a) acquires or receives more than 25 grams of cannabis per day,
    • b) acquires or receives more than 50 grams of cannabis per calendar month,
  13. extracts cannabinoids contrary to § 2 paragraph 2,
  14. possesses, cultivates, manufactures, imports, exports, acquires, receives, dispenses or transfers cannabis for scientific purposes, extracts cannabinoids from the cannabis plant or trades in cannabis for scientific purposes without authorization pursuant to Section 2 (4) sentence 1,
  15. cultivates cannabis without a permit pursuant to Section 11 (1),
  16. cultivates cannabis contrary to § 17 paragraph 1 sentence 1.

Graduated system in the KCanG

For many, it will be easiest to orientate themselves towards the limits of the criminal offense. In fact, however, there is a permitted range, with fines being imposed for minor transgressions and criminal offenses only for significant transgressions. The following possession is permitted under §3:

(1) Persons who have reached the age of 18 are permitted to possess up to 25 grams of cannabis, in the case of flowers, near-flowering leaves or other plant material of the cannabis plant based on the weight after drying, for personal consumption.

(2) Persons who have reached the age of 18 shall, notwithstanding subsection (1), be permitted to possess cannabis at their place of residence or habitual abode within the scope of this Act as follows:

  1. up to 50 grams of cannabis, in the case of flowers, near-flowering leaves or other plant material of the cannabis plant in relation to the weight after drying, and
  2. up to three live cannabis plants.

In cases of lawful possession of cannabis in accordance with sentence 1 number 1 and paragraph 1, the total quantity of cannabis possessed may not exceed 50 grams of cannabis, in the case of flowers, leaves close to the flower or other plant material of the cannabis plant in relation to the weight after drying.

So you can have up to 25 grams “in your pocket”, but it is only a criminal offense if you have 30 grams or more.

Where in Germany can you buy cannabis?

The legislator has permitted purchase purely on the basis of quantity, not source. As long as the above limits are adhered to, buying from a dealer is no longer punishable! This is different for the seller, the dealer acting illegally is always liable to prosecution.

In the medium term, however, the intention is to acquire them via so-called growers’ associations.

How does this affect existing penalties?

Anyone convicted of an offense that is now unpunishable should be rehabilitated. The public prosecutor’s offices automatically check how to act in the case of sentences that are still being enforced. Even in the case of total sentences where cannabis only played a partial role, the total sentence can (but does not have to!) be opened and redetermined. The central standard is Art. 313 EGStGB, here it will depend on the individual case.

What about the German certificate of good conduct

Entries that are currently unpunishable can be deleted from the Federal Central Criminal Register upon application; for this purpose, an application must be submitted to the public prosecutor’s office in accordance with Section 41 (1) KCanG to the effect that the corresponding entry is “eligible for deletion”. I have already described why this choice of words is tricky. From my point of view, it is unclear whether the expiry period of the BZRG applies in these cases or is to be deleted immediately; the legislator has obviously not recognized the problem.

What about ongoing criminal proceedings?

Here, too, it depends on the individual case: Affected persons who have clearly not acted criminally according to the current state of affairs should not be fobbed off with dismissals after being charged, but should press for an acquittal (if no other offense was also charged). Incidentally, you have to weigh up what makes sense. Many offenses, especially those relating to plantations, must be reassessed, especially in the preparatory stage (where seeds or cuttings play a role), and previous case law must not be applied blindly. The legislator has created a lot of leeway here, which has to be fought for in court.

Take care when driving

The current situation regarding driving is completely unclear. From a lawyer’s point of view, we can only advise you not to smoke weed and then drive. Allow at least 3 full consumption-free days between smoking weed and driving. At least.

What are underestimated crimes?

There are criminal offenses that are easily underestimated because so much seems to be legal: even if you are allowed to purchase cannabis, you are not allowed to sell it to others or take it abroad. And under no circumstances may you supply cannabis to minors, as this is a serious criminal offense!

Tourists in Germany

The law does not differentiate between Germans and foreigners or tourists. From a local perspective, anyone who purchases up to 25 grams per day is privileged and will not be punished. But: Pay attention to the monthly maximum limit of 50 grams and never possess more than 25 grams as a tourist! Even if you are allowed to have up to 50 grams “at home”, a hotel room will most likely not be considered a residence within the meaning of the Cannabis Act. It is therefore best to observe the minimum regulations.

What’s next for the Cannabis Act?

The law is highly controversial in Germany and it should be assumed that this law will come under very critical scrutiny after the next general election in 2025.

Categories
Labour law

Age discrimination in job advertisements by searching for “digital native”

In a remarkable decision, the German labor court in Heilbronn (case no. 8 Ca 191/23) dealt with the issue of age discrimination in job advertisements. The focus was on the use of the term “digital native” and its implications for older applicants.